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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application. 
Claim 5 has been amended. 

Listing of Claims: 

1 . (original) A method for a first device and a second device to maintain synchronization of a 
shared, dynamic secret, the method comprising: 

the second device sending an authentication request to the first device; 
the first device, in response to the authentication request, 
authenticating the second device, 

sending an authentication reply to the second device, and 

advancing a first copy of the secret; 
the second device, in response to the authentication reply, 

advancing a second copy of the secret; 
the first device, 

sending data to the second device, 

again advancing the first copy of the secret, and 

sending a data completion message to the second device; 
the second device, 

consuming the data, and 

in response to the data completion message, again advancing the second copy of the 

secret. 

2. (original) The method of claim 1 wherein the first device comprises a server and the second 
device comprises a web appliance. 

3. (original) The method of claim 1 further comprising: 

the first device storing the again advanced first copy of the secret; and 
the second device storing the again advanced second copy of the secret. 
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4. (original) The method of claim 1 further comprising: 

executing a recovery technique in response to the first and second copies of the secret 
becoming out of synchronization. 

5. (currently amended) A system for use on a network, the system comprising: 
a server including, 

a communication interface, 

a processor for performing logic operations, 

storage, 

stored in the storage, a first copy of a secret, 
a secret validator, and 

means for advancing the first copy of the secret; 
a web appliance including, 

a communication interface coupling the web appliance to the server over the network, 
a processor for performing logic operations, 
first storage, 

stored in the first storage of the web appliance, a second copy of the secret, 
means for advancing the second copy of the secret; 

second storage to store an authentication protocol to generate an authentication 
request to be sent to the server; and 
the server and the web appliance further including, 

a protocol for recovering synchronization of the first and second copies of the secret. 

6. (original) The system of claim 5 wherein the secret comprises a PIN. 
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7. (original) The system of claim 6 wherein the PIN comprises a number of at least 80 bits. 

8. (original) A method for a client device to maintain synchronization of a first copy of a 
secret stored on the client device with a second copy of the secret stored on a server device, the 
method comprising the client device: 

sending an authorization request to the server device; 

in response to receiving from the server device an authentication reply, 

advancing the first copy of the secret; and 
in response to receiving data from the server device, 

consuming the data, and 

again advancing the first copy of the secret. 

9. (original) The method of claim 8 further comprising the client device: 
in response to receiving data from the server device, 

storing the again advanced first copy of the secret. 

1 0. (original) The method of claim 8 further comprising the client device: 

in response to not receiving an affirmative authentication reply from the server device, 

(a) advancing the first copy of the secret, 

(b) sending the advanced first copy of the secret to the server device. 

11. (original) The method of claim 10 wherein the (a) advancing the first copy of the secret 
comprises twice advancing the first copy of the secret. 

12. (original) A method for a server to authenticate an appliance that is in communication 
with the server, the method comprising the server: 

receiving from the appliance an authentication request; 

sending an authentication reply to the appliance; 

advancing a first copy of a secret stored on the server; 

sending data to the appliance; 

sending a data completion message to the appliance; 

again advancing the first copy of the secret; and 

storing the again advanced first copy of the secret on the server. 
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13. (original) The method of claim 12 wherein the secret is a PIN. 

14. (original) The method of claim 12 wherein the secret comprises a value of at least 80 
bits. 

15. (original) The method of claim 12 further comprising: 

determining that the appliance is not authentic and, responsive to that determination, 
logging the authentication request, and 
disconnecting communication to the appliance. 

16. (original) An article of manufacture comprising: 

a machine-accessible medium including instructions that, when accessed by a machine, 
cause the machine to perform the method of claim 8. 

17. (original) The article of manufacture of claim 16 further comprising: 
instructions that, when accessed by the machine, cause the machine to perform the 

method of claim 10. 

18. (original) An article of manufacture comprising: 

a machine-accessible medium including instructions that, when accessed by a machine, 
cause the machine to perform the method of claim 12. 

19. (original) The article of manufacture of claim 18 further comprising: 
instructions that, when accessed by the machine, cause the machine to perform the 

method of claim 15. 
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